Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          bsv888LbZcyDR5S5zIjgzikI0rT7fHVw67G6YLd2wWk=
Subject key identifier:   9B:49:56:4E:76:51:97:E8:6F:1D:2D:01:76:EB:18:8B:F4:12:96:36
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       534193714F99891BA9CFB91B7EF70ED8A492C2C5
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 02:23:12 +0000
ROA not before:           Wed 27 Mar 2024 02:18:12 +0000
ROA not after:            Wed 26 Mar 2025 02:23:12 +0000
asID:                     38526
IP address blocks:        2405:3740:9016::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:41:93:71:4f:99:89:1b:a9:cf:b9:1b:7e:f7:0e:d8:a4:92:c2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 02:18:12 2024 GMT
            Not After : Mar 26 02:23:12 2025 GMT
        Subject: CN=9B49564E765197E86F1D2D0176EB188BF4129636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:39:f3:94:03:e0:f4:bc:92:f9:a1:67:0f:69:
                    81:a4:94:4b:11:3c:52:c6:e2:23:df:62:6b:16:dc:
                    23:0c:2d:c3:7b:86:6e:18:6d:2c:13:a1:57:57:3d:
                    fc:cd:8d:d2:71:77:7a:4d:a6:11:fb:eb:47:71:02:
                    f1:ac:51:ee:cf:0f:da:2f:9c:e3:f0:79:2d:3e:25:
                    61:5a:72:e0:a6:25:bb:8c:a0:72:e2:eb:53:06:05:
                    28:95:28:b7:6a:6a:f2:0d:c1:16:7d:06:0c:8c:0b:
                    0e:34:b2:5c:52:f2:9b:15:22:84:5d:f3:f1:a3:1f:
                    1c:af:c4:11:fa:8f:70:30:c7:52:f6:53:0a:66:c7:
                    0d:f9:8b:4d:68:0b:d9:98:77:26:0f:92:3e:2a:01:
                    2b:48:e1:d7:ab:ef:2b:73:c1:31:dc:30:e4:af:71:
                    8e:0a:7b:e8:d4:d9:74:b2:c7:37:cb:10:22:cd:31:
                    45:01:82:e1:74:4f:f6:65:cb:26:1b:ab:07:68:6b:
                    66:88:6d:b7:aa:f0:9b:39:ed:4b:1c:02:a5:8b:9f:
                    ed:43:c6:0c:30:43:b0:ce:d4:13:a2:8c:b9:ce:06:
                    fe:1f:1d:0d:26:e7:ba:69:07:c1:c3:bc:db:8c:7e:
                    4d:db:25:1c:af:5e:bc:80:af:46:f1:f9:5a:df:f8:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:56:4E:76:51:97:E8:6F:1D:2D:01:76:EB:18:8B:F4:12:96:36
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9016::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:4e:70:47:f3:19:69:f2:ba:d5:20:13:d2:e3:4b:d2:1b:44:
         b7:35:b0:45:86:fa:91:90:17:43:50:d2:52:01:79:b4:18:8d:
         10:97:f1:58:8f:d0:0b:9f:24:fe:39:87:6c:28:03:12:99:98:
         51:63:2f:8e:7f:d4:3d:81:7f:29:1b:fa:5c:b3:67:eb:d0:9a:
         a1:d1:b8:2b:c5:32:1f:b0:26:73:eb:7f:04:af:d8:bd:fc:ac:
         0d:94:1b:99:88:b3:dd:73:72:38:a7:4e:30:5f:bd:c6:98:a5:
         3e:7e:fe:6b:ae:56:67:39:51:f1:35:80:77:03:db:f1:f4:d3:
         81:87:dc:a3:a2:23:16:40:7c:10:8b:56:87:e7:62:eb:1a:e7:
         e1:58:8d:75:ed:65:7c:f2:1f:19:65:ed:37:62:8b:5e:fb:ac:
         ca:8a:d5:05:e3:96:ae:14:5c:f3:5c:7a:e9:77:e7:a9:74:47:
         f2:8f:26:ab:29:23:e0:ef:60:59:e3:e4:2f:56:fb:ee:04:72:
         84:04:23:4b:e8:1d:56:b7:ea:9e:80:02:3a:84:8d:38:b6:72:
         c7:49:d4:3f:fa:de:e4:d1:0e:6c:de:a7:e8:a4:68:c5:71:7e:
         c6:49:72:56:29:66:7c:10:df:31:6b:bc:a1:1c:18:4d:5c:81:
         bc:37:46:ef
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUU0GTcU+ZiRupz7kbfvcO2KSSwsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx
MzIyNTIwRDAeFw0yNDAzMjcwMjE4MTJaFw0yNTAzMjYwMjIzMTJaMDMxMTAvBgNV
BAMTKDlCNDk1NjRFNzY1MTk3RTg2RjFEMkQwMTc2RUIxODhCRjQxMjk2MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXOfOUA+D0vJL5oWcPaYGklEsR
PFLG4iPfYmsW3CMMLcN7hm4YbSwToVdXPfzNjdJxd3pNphH760dxAvGsUe7PD9ov
nOPweS0+JWFacuCmJbuMoHLi61MGBSiVKLdqavINwRZ9BgyMCw40slxS8psVIoRd
8/GjHxyvxBH6j3Awx1L2Uwpmxw35i01oC9mYdyYPkj4qAStI4der7ytzwTHcMOSv
cY4Ke+jU2XSyxzfLECLNMUUBguF0T/ZlyyYbqwdoa2aIbbeq8Js57UscAqWLn+1D
xgwwQ7DO1BOijLnOBv4fHQ0m57ppB8HDvNuMfk3bJRyvXryAr0bx+Vrf+FZZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUm0lWTnZRl+hvHS0BdusYi/QSljYwHwYDVR0j
BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy
MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy
NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxMzYz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3
QJAWMA0GCSqGSIb3DQEBCwUAA4IBAQDZTnBH8xlp8rrVIBPS40vSG0S3NbBFhvqR
kBdDUNJSAXm0GI0Ql/FYj9ALnyT+OYdsKAMSmZhRYy+Of9Q9gX8pG/pcs2fr0Jqh
0bgrxTIfsCZz638Er9i9/KwNlBuZiLPdc3I4p04wX73GmKU+fv5rrlZnOVHxNYB3
A9vx9NOBh9yjoiMWQHwQi1aH52LrGufhWI117WV88h8ZZe03Yote+6zKitUF45au
FFzzXHrpd+epdEfyjyarKSPg72BZ4+QvVvvuBHKEBCNL6B1Wt+qegAI6hI04tnLH
SdQ/+t7k0Q5s3qfopGjFcX7GSXJWKWZ8EN8xa7yhHBhNXIG8N0bv
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org